On Thu, Sep 23, 2004 at 08:53:22AM -0400, Elijah Savage wrote: | When I installed this box I specifically installed it for this task and | installed linux compatibilty during intstall, the /etc/nsswitch.conf was | created and everything. I can join my AD domain as NT4 style but not | with ADS which is strange and it works with NT4 style as long as the | usernames are local to the samba machine. It was recommended that I run | the latest heimdal 0.6.1 so I mad world last night everything went great | and I am running the latest 4.10 stable with heimdal 0.6.1 and I get | these errors when I try to join the AD domain as ADS. But if I use the | rpc join for nt4 style it joins right up I can see all my shares on the | samba box and get to them. One good thing out of all this it is on a lab | LAN so I am glad I got a chance to test it before trying to implement | it. | | ns1# kinit [EMAIL PROTECTED] | FreeBSD Inc. (luke.digitalrage.org) | Kerberos Initialization for "[EMAIL PROTECTED]" | Password: | kinit: Can't send request (send_to_kdc)
Try k5init instead of kinit, And k5list/k5destroy/... ("mmm, FreeBSD" . . . ) | ns1# net ads join -U Administrator%XXXXXX | [2004/09/23 07:15:57, 0] libads/kerberos.c:ads_kinit_password(136) | kerberos_kinit_password [EMAIL PROTECTED] failed: | Unknown error -1765328228 | [2004/09/23 07:15:57, 0] utils/net_ads.c:ads_startup(183) | ads_connect: Unknown error -1765328228 According to http://www.net.berkeley.edu/kerberos/k5msgs.html error -1765328228 is Cannot contact any KDC for requested realm. I know that on NetBSD 2.0_RC1 (which has Heimdal 0.6.3) with Samba 3.0.7 I can do % kinit [EMAIL PROTECTED] (enter password; note that kinit on NetBSD is krb5 kinit) % net ads join -U Administrator and the computer account gets created in the ADS. Also, once this is done I can kinit as a user of the realm and use 'smbclient -k -L //someserver/' and things Just Work. I'm still working on getting libnss_winbind.so ported to NetBSD-current, Luke.
pgpobij2BcN0y.pgp
Description: PGP signature
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba